
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier: lhrxhQHUIuZcS6OLlz36Ket/O1vby3HGhnt3cuRC8N0=
Subject key identifier: C9:2B:61:50:6C:26:C5:36:72:F5:7B:F6:E4:E5:DB:23:83:20:FF:F6
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019E1E6CA42C7725E109D8D5C2461D6A49F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number: 18A8
Signing time: Tue 12 May 2026 23:01:36 +0000
Manifest this update: Tue 12 May 2026 23:01:36 +0000
Manifest next update: Wed 13 May 2026 23:01:36 +0000
Files and hashes: 1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
6: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
7: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
8: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
9: Sl7-Gj6EnnbA3uXupRaztTXD_io.roa (hash: fezcKvQQu+h2ziI78m9/Di/EMv2lyq3BEYWNcQA5EA8=)
10: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
11: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
12: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=)
13: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
14: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
15: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: FJDdrKt/GA7/A+xmIuQpoirKtq7ldV52Vd/gXP+6uOs=)
16: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
17: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
18: xUsfdtgD1j1T7j6n66HdbJOfPDs.roa (hash: U4IhStPfUvQ+RWTW7WTK40Ox8axplO5trMxYdWn3hz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a4:2c:77:25:e1:09:d8:d5:c2:46:1d:6a:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: May 12 23:01:36 2026 GMT
Not After : May 13 23:01:36 2026 GMT
Subject: CN=c92b61506c26c53672f57bf6e4e5db238320fff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:da:87:0b:b2:27:9d:3c:4e:4e:b4:5b:70:
19:84:83:50:1d:c3:f4:38:97:e1:ac:3f:64:dc:23:
c2:ab:02:74:a2:ad:8d:66:24:f4:20:00:c4:9f:9f:
44:23:92:c9:05:58:e0:48:f6:34:de:fa:25:52:67:
c7:87:d8:b4:b9:b7:60:d5:34:36:d6:dd:12:cb:58:
78:4f:f7:b9:c8:8f:04:29:81:4d:0a:72:0a:d3:ec:
0b:87:0c:19:3c:89:2f:7d:92:00:ec:7e:33:08:55:
61:c9:4f:86:a9:d0:18:c8:de:f4:4c:8e:f9:30:c1:
12:6b:cd:42:e6:8c:16:75:83:42:b0:ab:a5:6d:fb:
5a:6a:05:10:ec:99:6b:c4:3a:00:9c:a8:84:43:e8:
f9:5d:1b:67:6e:ce:20:5f:be:97:48:a9:b2:40:ce:
e6:31:c3:70:48:39:bb:35:42:5d:ec:76:35:c9:1a:
65:cd:bb:c9:0b:76:48:07:70:2c:99:44:03:09:7e:
04:1f:cc:7f:70:de:6a:0e:01:ec:25:32:41:f7:d1:
5b:fd:40:f2:11:7a:9a:fb:de:a7:f4:ab:f3:0e:44:
22:80:b2:73:fb:a2:d0:8a:f2:74:e8:07:f7:a9:7c:
d2:bb:28:0f:8c:84:2a:2b:5b:17:ff:60:f3:f8:fd:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2B:61:50:6C:26:C5:36:72:F5:7B:F6:E4:E5:DB:23:83:20:FF:F6
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:43:f0:38:6b:0d:b4:14:89:75:6d:04:74:65:a6:60:d2:
f2:99:a7:34:8f:fa:0c:1b:44:f4:16:e0:6c:2d:cd:47:ee:a5:
41:58:47:a0:a5:08:09:18:97:a5:c1:b7:57:51:43:11:93:65:
68:d6:b4:3a:92:08:87:a4:14:6d:ad:75:be:9a:a6:f1:6d:a8:
59:05:0b:a6:e7:01:6b:96:50:5f:03:d0:b0:70:32:95:af:8e:
06:be:cc:a1:97:b3:ae:43:56:62:6d:79:cd:6c:3b:27:9d:e4:
d4:8b:b1:0f:3c:c3:06:3a:9a:b9:82:37:ff:bd:a1:11:1c:69:
34:e5:d3:52:0e:ec:dc:e8:fc:77:96:1e:d1:e4:63:03:22:eb:
f6:89:df:da:2b:b1:12:74:82:c3:7a:49:bb:d0:69:5a:d5:f3:
a2:63:60:68:39:16:9d:60:69:f5:7e:a5:42:c2:d2:af:c5:de:
b3:2e:38:f1:c5:91:a4:2e:42:e4:dd:e6:c2:9b:60:96:f8:3f:
de:eb:f7:7d:f9:65:02:04:43:a1:7e:2f:b1:67:2b:54:83:ae:
95:df:a7:7a:e9:03:86:50:0e:65:de:ee:42:b3:5e:45:7e:e7:
b6:37:31:b2:f1:04:0b:3e:55:78:70:dd:5d:57:de:d3:db:71:
bf:d8:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:34 2026 by rpki-client